This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft
File:                     1p-GUNl6UkwplFPMtI13tOZf3yI.mft (raw, json)
Hash identifier:          lV3XtwqCCaJcdySKYwyi8A+A1NCDu5gkzUMliRHcpB4=
Subject key identifier:   24:D8:1F:5B:FD:57:2E:66:36:B5:82:86:74:2B:E5:08:90:86:05:E6
Authority key identifier: D6:9F:86:50:D9:7A:52:4C:29:94:53:CC:B4:8D:77:B4:E6:5F:DF:22
Certificate issuer:       /CN=A91F0695/serialNumber=D69F8650D97A524C299453CCB48D77B4E65FDF22
Certificate serial:       0179
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1p-GUNl6UkwplFPMtI13tOZf3yI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft
Manifest number:          0176
Signing time:             Sun 21 Dec 2025 03:01:38 +0000
Manifest this update:     Sun 21 Dec 2025 03:01:38 +0000
Manifest next update:     Sun 28 Dec 2025 03:01:38 +0000
Files and hashes:         1: 1p-GUNl6UkwplFPMtI13tOZf3yI.crl (hash: YGjk+yaSvDIsU/rBG5auGTLUKDi0CPCGk2UNW/Q8Lu0=)
                          2: D1054582A0C111EEA54E2F0BC4F9AE02.roa (hash: LiqmtbZL/k65yoRZh2qeTmSOnyQ0Qghej6NC1OoEsfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.crl
                          rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1p-GUNl6UkwplFPMtI13tOZf3yI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 03:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377 (0x179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0695, serialNumber=D69F8650D97A524C299453CCB48D77B4E65FDF22
        Validity
            Not Before: Dec 21 03:01:38 2025 GMT
            Not After : Dec 28 03:01:38 2025 GMT
        Subject: CN=69476312-4072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b2:53:6b:64:63:39:20:d3:37:e2:86:b3:d1:
                    5b:01:54:64:78:0f:1a:56:1c:f8:2a:39:c6:e5:62:
                    01:57:16:6e:d5:b8:07:24:7e:ef:da:ca:89:1e:ce:
                    78:23:a6:54:b7:21:4b:bd:5b:0d:d0:1d:24:7c:7a:
                    cb:ad:1d:be:3a:25:1e:0d:99:17:a8:a0:92:2a:4e:
                    fe:12:a2:42:62:3a:e9:1e:70:b5:17:98:25:fe:54:
                    bc:a0:64:68:51:f2:d7:11:f3:22:ba:22:35:e2:eb:
                    66:b5:2d:94:cb:54:a3:a9:38:88:2f:1f:f3:50:03:
                    74:47:31:32:7c:20:2c:79:02:04:99:3d:94:52:2a:
                    89:16:db:62:51:6c:0b:b1:9b:f9:3d:08:c0:63:0c:
                    df:6b:08:2a:3a:96:59:96:aa:6d:c7:ea:5e:5c:4e:
                    03:79:59:03:1e:a6:2b:d9:ee:2a:ac:7c:d9:8e:9b:
                    2e:bb:64:71:83:be:73:e5:a1:a9:df:d7:ea:40:17:
                    ac:a2:01:48:96:0d:e2:2d:a9:56:23:2d:90:f3:b5:
                    9b:32:e0:9c:90:9b:8b:2c:4e:66:21:52:bd:1a:5a:
                    4a:bc:cc:a6:96:13:aa:33:b2:c9:26:ef:91:b0:1a:
                    c7:d1:98:b0:cb:6d:3b:1f:8d:09:a3:04:8e:87:8d:
                    4d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D8:1F:5B:FD:57:2E:66:36:B5:82:86:74:2B:E5:08:90:86:05:E6
            X509v3 Authority Key Identifier:
                keyid:D6:9F:86:50:D9:7A:52:4C:29:94:53:CC:B4:8D:77:B4:E6:5F:DF:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1p-GUNl6UkwplFPMtI13tOZf3yI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:85:59:6e:54:24:02:5d:f8:ad:c8:69:63:ad:4b:7a:01:df:
         72:c0:f2:eb:97:36:ae:6d:b4:cc:6d:fe:42:70:27:1a:75:45:
         13:7f:11:63:73:79:38:af:7f:83:c2:aa:7f:1e:c5:61:19:02:
         cd:90:74:2d:34:ee:a5:83:75:40:29:5a:17:77:cb:b4:19:84:
         db:2c:1f:8e:24:d4:38:9d:8d:03:70:f2:f7:53:74:67:67:21:
         77:d5:0a:19:e5:ae:ef:9a:f4:f4:67:8e:b9:e7:f2:97:21:2f:
         9e:a4:9f:ce:dc:97:75:c1:32:1f:b9:09:93:ca:ae:5d:94:ed:
         e8:34:3e:b4:be:c6:79:ab:60:2c:f8:8e:06:da:22:6b:2e:23:
         90:6e:3d:55:30:8b:0e:36:f3:3a:3e:11:6f:f5:ac:2a:47:e4:
         79:5e:d9:ee:37:bb:05:8a:fc:b5:7e:a2:32:9d:f6:f0:f7:4a:
         f3:ad:96:63:9d:75:ca:35:1c:8f:6b:db:fc:65:62:cf:a6:10:
         0e:09:ae:dd:dd:83:e0:d8:80:1e:66:4a:83:54:eb:1d:00:f0:
         a7:a6:ba:98:3f:44:c4:98:cd:1f:e8:11:eb:9c:37:54:8b:b2:
         8b:86:00:0d:b2:ea:24:a1:7a:fe:a4:13:ac:70:e6:1b:2c:51:
         93:40:f4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 04:01:47 2025 by rpki-client